Odido: 6.2 million customers’ data taken from the customer contact system after a fake IT-staff phone call

What happened

• Odido said attackers accessed its customer contact system on 7 Feb 2026 and downloaded data on more than 6.2 million customers (including Ben NL and former customers from the past two years): names, phone numbers, postal and email addresses, dates of birth, IBANs and passport or driver’s licence numbers and validity dates. Odido says call records, location, billing data, ID scans and Mijn Odido passwords were not exposed.
• Root cause per Dutch police (8 Jul 2026): a Dutch-speaking man called Odido customer service posing as an IT employee shortly before the hack, and the company was misled through phishing. Secondary reports say the technique matches one Salesforce warned about in January.
• ShinyHunters claimed it on its leak site and published an 88GB archive of over 15 million records. Odido has not attributed it; police suspect Dutch nationals.
• Reported to the Dutch Data Protection Authority; customers notified directly.

Sources

• https://techcrunch.com/2026/02/13/dutch-phone-giant-odido-says-millions-of-customers-affected-by-data-breach/
• https://www.bleepingcomputer.com/news/security/police-suspects-dutch-hackers-were-involved-in-odido-breach/

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.